Citrix Cloud Connector proxy and firewall configuration

Port 443 using HTTP traffic, egress only. For full connectivity details, see the following articles:

The Cloud Connector supports connection to the Internet through a web proxy server. Both the installer and the services it installs need connections to Citrix Cloud Japan. Internet access needs to be available at both of these points.

Important:

Enabling SSL decryption on certain proxies might prevent the Cloud Connector from connecting successfully to Citrix Cloud Japan. For more information about resolving this issue, see CTX221535.

Excluding traffic using wildcards and FQDNs

When configuring a proxy server to exclude Cloud Connector traffic, use the allowed Cloud Connector FQDNs that are included in the allowlist.json file for Citrix Cloud Japan. Don’t use wildcards to exclude this type of traffic.

The following command is an example of excluding traffic using an allowed FQDN for Citrix Cloud Connector:

netsh winhttp set proxy bypass-list agenthub-jp.citrixworkspacesapi.jp
<!--NeedCopy-->

For more information, see Allowed FQDNs for Cloud Connector

Using wildcard addresses to exclude Cloud Connector traffic isn’t supported. If you configure the bypass list using wildcards, these addresses are ignored and you might still see Cloud Connector traffic.

Installer

The installer uses the settings configured for Internet connections. If you can browse the Internet from the machine, then the installer should also function.

See Changing proxy server settings in Windows for details about configuring the proxy settings.

Services at Runtime

The runtime service operates in the context of a local service. It does not use the setting defined for the user as described above. You need to import the setting from the browser.

To configure the proxy settings for this, open a Command Prompt window and use netsh as follows:

netsh winhttp import proxy source =ie
<!--NeedCopy-->

After executing the command, restart the machine hosting the Cloud Connector so that the services start up with these proxy settings.

For complete details, see Netsh Commands for Windows Hypertext Transfer Protocol (WINHTTP).

Note:

Auto-detect or PAC scripts are not supported.

Citrix Cloud Connector proxy and firewall configuration